O:\OOO330\ooo\filter\wntmsci12.pro\bin\iptmi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f2b02d84904a6e04a41279db37e28c0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f2b02d84904a6e04a41279db37e28c0_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2f2b02d84904a6e04a41279db37e28c0_JaffaCakes118
-
Size
28KB
-
MD5
2f2b02d84904a6e04a41279db37e28c0
-
SHA1
5c5d555d8550230c0c12e1b41b4bdefedb87f214
-
SHA256
22103b705d32c7191e9013f4b08f0d1bb2934f74f84b95c2e05f754280fb00f4
-
SHA512
69e70b3ea989d4253eb320923676f3a7e01ba6fee26a91e3d9b42b4fae2f01e75afbdf385cec2e2c74ba957a910fe9e9abaa86e52cfc04383f61ef66115c3e4f
-
SSDEEP
768:n0any7VVDJNxbweKbqRS0Yjdk7KSsX6l4tfaOtICU3:09/VkuRS02k1l4tfaOtICK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2b02d84904a6e04a41279db37e28c0_JaffaCakes118
Files
-
2f2b02d84904a6e04a41279db37e28c0_JaffaCakes118.dll windows:5 windows x86 arch:x86
08e3ac6807ce3b0790be7629bb1ac4a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
vclmi
??0GDIMetaFile@@QAE@XZ
??0Graphic@@QAE@ABVGDIMetaFile@@@Z
??4Graphic@@QAEAAV0@ABV0@@Z
??1Graphic@@UAE@XZ
??1GDIMetaFile@@UAE@XZ
??1VirtualDevice@@UAE@XZ
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetSettings@OutputDevice@@UAEXABVAllSettings@@@Z
?SetAlign@Font@@QAEXW4TextAlign@@@Z
??0VirtualDevice@@QAE@G@Z
?EnableOutput@OutputDevice@@QAEXE@Z
?Record@GDIMetaFile@@QAEXPAVOutputDevice@@@Z
?Stop@GDIMetaFile@@QAEXXZ
??0MapMode@@QAE@W4MapUnit@@ABVPoint@@ABVFraction@@2@Z
??4MapMode@@QAEAAV0@ABV0@@Z
??1MapMode@@QAE@XZ
??0Region@@QAE@ABVRectangle@@@Z
?SetClipRegion@OutputDevice@@QAEXABVRegion@@@Z
??1Region@@QAE@XZ
?SetFamily@Font@@QAEXW4FontFamily@@@Z
?SetCharSet@Font@@QAEXG@Z
?SetWeight@Font@@QAEXW4FontWeight@@@Z
?SetItalic@Font@@QAEXW4FontItalic@@@Z
?SetUnderline@Font@@QAEXW4FontUnderline@@@Z
?SetOutline@Font@@QAEXE@Z
?SetShadow@Font@@QAEXE@Z
?SetSize@Font@@QAEXABVSize@@@Z
?DrawLine@OutputDevice@@QAEXABVPoint@@0@Z
?SetName@Font@@QAEXABVString@@@Z
?DrawBitmap@OutputDevice@@QAEXABVPoint@@ABVSize@@ABVBitmap@@@Z
?DrawArc@OutputDevice@@QAEXABVRectangle@@ABVPoint@@1@Z
?DrawPie@OutputDevice@@QAEXABVRectangle@@ABVPoint@@1@Z
?DrawPolyLine@OutputDevice@@QAEXABVPolygon@@@Z
?DrawPolygon@OutputDevice@@QAEXABVPolygon@@@Z
?DrawEllipse@OutputDevice@@QAEXABVRectangle@@@Z
?DrawRect@OutputDevice@@QAEXABVRectangle@@KK@Z
?DrawRect@OutputDevice@@QAEXABVRectangle@@@Z
??1Font@@QAE@XZ
??0Bitmap@@QAE@XZ
??0Bitmap@@QAE@ABVSize@@GPBVBitmapPalette@@@Z
??4Bitmap@@QAEAAV0@ABV0@@Z
??1Bitmap@@QAE@XZ
?AcquireWriteAccess@Bitmap@@QAEPAVBitmapWriteAccess@@XZ
?SetPaletteEntryCount@BitmapWriteAccess@@QAEXG@Z
?SetPaletteColor@BitmapWriteAccess@@QAEXGABVBitmapColor@@@Z
?SetPixel@BitmapWriteAccess@@QAEXJJABVBitmapColor@@@Z
?AcquireReadAccess@Bitmap@@QAEPAVBitmapReadAccess@@XZ
?ReleaseAccess@Bitmap@@QAEXPAVBitmapReadAccess@@@Z
?DrawText@OutputDevice@@QAEXABVPoint@@ABVString@@GGPAV?$vector@VRectangle@@V?$allocator@VRectangle@@@_STL@@@_STL@@PAV3@@Z
?SetColor@Font@@QAEXABVColor@@@Z
?SetFillColor@Font@@QAEXABVColor@@@Z
?SetTransparent@Font@@QAEXE@Z
?SetFont@OutputDevice@@QAEXABVFont@@@Z
?SetRasterOp@OutputDevice@@QAEXW4RasterOp@@@Z
?SetFillColor@OutputDevice@@QAEXABVColor@@@Z
?SetLineColor@OutputDevice@@QAEXABVColor@@@Z
??0Font@@QAE@XZ
tlmi
??0Fraction@@QAE@JJ@Z
?SetNumberFormatInt@SvStream@@QAEXG@Z
?GetError@SvStream@@QBEKXZ
?GetSize@Rectangle@@QBE?AVSize@@XZ
?TopLeft@Rectangle@@QBE?AVPoint@@XZ
??1Polygon@@QAE@XZ
??5SvStream@@QAEAAV0@AAJ@Z
??0Fraction@@QAE@N@Z
??_0Fraction@@QAEAAV0@ABV0@@Z
?SetError@SvStream@@QAEXK@Z
?Seek@SvStream@@QAEKK@Z
?Read@SvStream@@QAEKPAXK@Z
??0String@@QAE@PBDGK@Z
??1String@@QAE@XZ
?SeekRel@SvStream@@QAEKJ@Z
?SetSize@Polygon@@QAEXG@Z
??0Polygon@@QAE@XZ
??5SvStream@@QAEAAV0@AAF@Z
??5SvStream@@QAEAAV0@AAD@Z
??5SvStream@@QAEAAV0@AAE@Z
??5SvStream@@QAEAAV0@AAK@Z
??5SvStream@@QAEAAV0@AAG@Z
??0Rectangle@@QAE@ABVPoint@@0@Z
?SetPoint@Polygon@@QAEXABVPoint@@G@Z
sal3
osl_getThreadTextEncoding
msvcr90
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
??2@YAPAXI@Z
_CIsin
_CIcos
??_U@YAPAXI@Z
??_V@YAXPAX@Z
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
GetVersionInfo
GraphicImport
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ